Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133322e302f32322d3234203d3e203338333635.roa
File:                     3138322e36312e3133322e302f32322d3234203d3e203338333635.roa (raw, json)
Hash identifier:          VzNxqXDyEJT8s+fv+l0hbZoFmOgzL/6RZw8iH5R4eXU=
Subject key identifier:   3D:81:50:EC:15:A8:17:DD:6F:7F:54:DC:4A:37:E7:28:31:FB:A2:27
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       36F4285708A88E34C45AAD41F65121697D7A9CBC
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133322e302f32322d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 10:42:48 +0000
ROA not before:           Sun 19 Apr 2026 10:37:48 +0000
ROA not after:            Sun 18 Apr 2027 10:42:48 +0000
asID:                     38365
IP address blocks:        182.61.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:28:57:08:a8:8e:34:c4:5a:ad:41:f6:51:21:69:7d:7a:9c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:37:48 2026 GMT
            Not After : Apr 18 10:42:48 2027 GMT
        Subject: CN=3D8150EC15A817DD6F7F54DC4A37E72831FBA227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:7f:c2:53:dd:f1:7f:64:5c:e9:9a:66:4f:
                    d0:83:cc:8e:b4:e8:8c:97:36:12:86:8d:02:c3:a6:
                    82:ca:d1:4c:7f:bd:09:42:0b:c8:1d:7c:e6:26:a7:
                    e2:37:91:55:05:7f:91:9b:80:2e:35:d1:01:90:50:
                    f8:5a:89:83:c2:b3:3d:fc:9c:0c:ab:db:3a:94:32:
                    5e:c5:e8:97:aa:ae:d7:1c:34:ee:e2:4a:4e:4b:25:
                    2a:3e:03:5a:32:e0:b8:a9:d7:23:c4:c7:fe:15:d4:
                    2a:68:da:08:46:4d:6c:df:71:b2:1b:8a:51:ce:82:
                    00:45:75:63:82:2e:07:1e:91:b1:e4:3b:0c:b7:ac:
                    f2:1e:43:71:8c:20:18:77:71:b3:6c:e7:93:17:ab:
                    2a:2e:af:e3:b5:f1:85:67:fa:2f:5f:c7:5b:48:54:
                    71:19:d9:20:b7:ac:2c:ea:04:82:16:9b:5b:40:ae:
                    3d:04:e9:bb:91:73:71:8f:a4:51:56:05:f2:c5:0f:
                    84:6f:91:21:d0:de:9d:d1:b2:1d:07:c6:6c:7a:56:
                    c4:d9:cc:c2:15:3b:df:11:a9:4e:a6:19:1f:ce:d7:
                    7a:01:2a:24:01:01:70:20:cc:4a:45:6c:f4:76:b3:
                    c7:d5:c1:9a:20:10:37:f3:cb:cd:fe:e9:d3:48:4a:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:81:50:EC:15:A8:17:DD:6F:7F:54:DC:4A:37:E7:28:31:FB:A2:27
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133322e302f32322d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:77:4e:e8:ce:b8:f2:57:a8:eb:6b:e3:43:69:3d:0e:1e:b7:
         bc:d0:60:fa:40:ab:a6:ee:45:60:9e:83:2d:67:30:57:5f:4a:
         7b:01:3e:27:36:4a:48:9d:48:10:63:6d:b5:a0:20:9c:83:59:
         c2:a3:87:af:bd:ae:56:f5:d3:e1:3a:56:4e:bc:36:a0:e7:c5:
         c1:bc:65:92:84:ef:85:98:0f:a3:30:22:37:b8:80:6b:55:94:
         f9:cc:b3:10:f9:39:38:b9:03:47:19:98:4d:2e:17:63:96:73:
         45:1e:4b:21:94:ee:ba:de:ad:eb:b0:a2:8d:ba:0b:47:b1:fa:
         75:61:df:fc:83:5d:a6:5e:b6:b4:6a:a9:5e:aa:57:e4:8c:42:
         f6:43:01:b9:b8:12:33:76:26:b2:d1:71:df:a5:af:1b:4c:ba:
         3a:5c:11:67:e9:42:d1:9d:5e:11:d1:2f:06:f9:95:26:ee:c6:
         4f:ea:bd:69:ef:78:71:d2:6d:5a:01:b7:d9:eb:d7:84:8c:71:
         6a:56:ba:19:a4:45:bf:24:28:d8:6d:0c:7b:3a:2c:18:d5:04:
         76:96:9f:64:4a:1d:e2:ed:21:3c:57:dd:61:6f:58:27:77:df:
         8b:f4:2c:13:2b:0a:d2:d4:b5:47:4c:f3:87:89:92:a4:85:0a:
         5f:19:8e:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:25 2026 by rpki-client